@wsl8297: Want to learn cybersecurity? Most of the time isn't spent on learning itself, but on finding materials: tutorials in one place, tools in another, and practice environments elsewhere—piecing them together already wastes half a day. The h4cker project on GitHub, long maintained by renowned security author Omar Santos, compiles commonly used resources into a one-stop guide...
Summary
This article introduces the h4cker GitHub project maintained by Omar Santos, a one-stop cybersecurity resource navigation covering offensive and defensive techniques, cloud security, application security, AI security, and preparation materials for mainstream security certifications, helping learners efficiently find tutorials, tools, and lab environments.
View Cached Full Text
Cached at: 06/03/26, 05:53 PM
When learning cybersecurity, the most time-consuming part is often not the learning itself, but finding materials: one set of tutorials, another set of tools, and the practice environment somewhere else. Piecing together these bits and pieces can waste half a day.
The h4cker project on GitHub, maintained long-term by renowned security expert Omar Santos, provides a one-stop navigation for commonly used resources: offensive and defensive techniques, cloud security, application security, to AI security, all clearly categorized by direction. Each domain comes with tools, scripts, lab environments, and reference materials ready to follow.
GitHub:http://github.com/The-Art-of-Hacking/h4cker…
It also offers a complete guide to building a practice environment from scratch, allowing you to get hands-on locally. Additionally, it separately organizes exam preparation materials and learning paths for mainstream security certifications, including CompTIA, Cisco, ISC2, and others.
Whether you’re a beginner looking to quickly find a path or preparing for certification and need systematic review, this is worth bookmarking and revisiting anytime.
The-Art-of-Hacking/h4cker
Source: https://github.com/The-Art-of-Hacking/h4cker
Typing SVG (https://git.io/typing-svg)
This repository is a comprehensive collection of cybersecurity references, scripts, tools, code, labs, and training resources. It is carefully curated and maintained by Omar Santos (https://omarsantos.io/).
Overview
The repository serves as supplemental material for books, video courses, and live training created by Omar Santos. It includes resources for offensive security, defensive security, cloud and container security, application security, AI security, certifications, labs, and reference material.
Directory Overview
- Cybersecurity Domains: cybersecurity-domains contains the main domain taxonomy, including fundamentals, offensive security, defensive security, application security, cloud and container security, infrastructure and network security, cryptography and PKI, hardware and embedded security, governance/risk/compliance, and labs/practice.
- AI: ai contains AI security, LLM engineering, AI-assisted incident response and automation, and AI ethics/privacy/governance resources.
- Certifications: certifications contains certification roadmaps, Cisco SCOR, cloud certifications, Kubernetes/CNCF certifications, CompTIA, ISC2, offensive security certification references, and supplemental exam topics.
- Build Your Own Lab: build-your-own-lab remains a root-level section for lab-building and cyber range resources.
- Training Reference: training-reference contains cheat sheets, O’Reilly resources, curated people/projects to follow, and organized tool indexes.
How to Use
Start with the domain landing page that matches your goal, then follow the links to tools, labs, scripts, and references. Certification resources are grouped separately so exam preparation material is easy to find without mixing it into the broader domain taxonomy.
Contributing
If you wish to contribute, please read the CONTRIBUTING.md file.
License
This project is licensed under the MIT License - see the LICENSE file for details.
Contact
For any inquiries or feedback, please contact Omar Santos (https://www.linkedin.com/in/santosomar/).
Similar Articles
@FakeMaidenMaker: the-book-of-secret-knowledge: Engineer's Secret Recipe Collection. Every time I need a handy CLI tool or trick, I end up Googling a bunch of stuff, find it but can't remember it, and have to search again next time. Recently I discovered a super useful resource library that categorizes all the CLI tools, cheatsheets, one-liners, and tutorials you need for daily command-line work. It's ready to browse and use anytime.
Introduces the the-book-of-secret-knowledge repository on GitHub, which collects a large number of CLI tools, cheatsheets, operations tips, and security resources, suitable for daily reference by engineers.
@NFTCPS: Tired of scrolling through Hacker News, Twitter, Reddit, and GitHub every day? It's all fluff, repetitive content, noise – like a dumpster fire. I recently discovered a new tool: Horizon, a hardcore tech news radar. Let it keep an eye on the global tech scene for you, so you just need to open a briefing every morning. Core…
Horizon is an open-source AI-powered news radar tool that aggregates, deduplicates, scores, and summarizes tech news from Hacker News, Reddit, GitHub and other sources to generate daily bilingual briefings.
Show HN: I Dedicated 4 Years to Mastering Offline Password Cracking
After four years of self-study, the author published a comprehensive guide to offline password cracking using Hashcat, sharing techniques and workflows for penetration testers and security enthusiasts.
@Chenzeze777: Stop wasting money on coding bootcamps. This developer roadmap on GitHub has 350k stars: https://github.com/kamranahmedse/developer-roadmap… The author is a self-taught career-switcher who directly broke down the programming roadmap…
A developer roadmap project with 350k stars on GitHub, providing multiple learning paths including frontend, backend, DevOps, and hands-on projects to help self-taught programming.
@yaojingang: Open-sourced a website scanning skill: yao-websecurity-skill. I've learned that at least three public companies have deployed GEOFlow, and many friends have done various secondary developments based on this system, including commercial SaaS versions. Its security issues need to be taken seriously. Additionally, more and more...
Open-sourced yao-websecurity-skill, an AI-based website security audit skill. It includes 275 security checks, supports static and dynamic audit modes, and automatically generates security scoring reports to help developers discover and fix security risks.